MALICIOUS — CRITICAL
فحص التصيد والأمان للنطاق ldgre-leve.pages.dev
ldgre-leve[.]
Analysis indicates that ldgre-leve.pages.dev is associated with a brand impersonation threat and remains active at the time of assessment.
- VirusTotal
- 11/91
- Blocklists
- No stored match
- التوفر
- آخر نشاط معروف · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
ldgre-leve.pages.dev — آخر نشاط معروف (HTTP 200). انتحال العلامة التجارية: Ledger; نوع الاحتيال: Brand Impersonation. ملخص الأدلة: VirusTotal 11/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); URLScan malicious verdict; PhishDestroy score 98/100. مسجّل النطاق: Cloudflare.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
Evidence Analysis
Analysis indicates that ldgre-leve.pages.dev is associated with a brand impersonation threat and remains active at the time of assessment. The domain presents content titled "Ledger Live Wallet — Technical Edition" and is identified as impersonating Ledger. Based on the available intelligence, the infrastructure should be treated as under investigation due to its use of branding elements that may mislead visitors and facilitate credential harvesting, financial fraud, or other forms of user deception.
Technical indicators show that the domain resolves to IP address 172.66.47.91 and was created on May 04, 2026. Registration is associated with Cloudflare, Inc., and the reported IP location is CA under Cloudflare, Inc. infrastructure. The observed TLS certificate is issued by Google Trust Services / WE1. The domain currently appears on 1 security blocklist and has been blocked by PhishDestroy. At the same time, VirusTotal reports 0 of 95 vendor detections, indicating that broader security-engine visibility has not yet produced widespread classification despite the existing blocklist presence.
The site remains active, increasing the likelihood of continued exposure to users who encounter the domain through links, messages, advertisements, or search results. Given the combination of brand impersonation indicators, active status, and existing blocklist inclusion, interaction with the domain should be avoided pending further verification. Security teams should monitor for related infrastructure, collect additional telemetry, review network and email logs for access attempts, and consider preventive blocking where appropriate. End users should avoid submitting credentials, authentication data, recovery information, financial details, or downloadable content through this domain until its legitimacy can be independently confirmed.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
نطاق تغطية البيانات12 recorded checks
استخبارات أمن الشبكات
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
التقنيات · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org ثقة 100٪Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com ثقة 100٪HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org ثقة 100٪تحليل VirusTotal
تحليل أداء الموقع
Google PageSpeed Insights — mobile performance audit of ldgre-leve.pages.dev · checked May 4, 2026
الأدلة والتقارير الخارجيةIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.